Clik here to view.
Active Directory lockout email alerts showing 999
Hello,I've tried searching the forums but could not find this specific issue mentioned. I've been using LogInsight to email me AD lockouts for the past year or so. It's been working well until...
View ArticleLog Insight CSV Parser problem
I added a csv parser to liagent.ini with fields and timestamp parser for an nlog-based text logfile.The log format is...
View ArticlevROPS logs are not being collected in loginsight . Even after configuring...
Have integrated vrops 6.5 with Loginsight 4.3 version. Integration is successful. From vrops am able to go to the loginsight to check any object logs. But Am not able view any logs for the vrops itself...
View Articletimestamp field is not significant for vRealize REST Api.
In vRealize Log Insight REST Api, while quering the data with the url: https://localhost/api/v1/events/timestamp/>1497530830, i expect only events later than time 1497530830, but the url actually...
View ArticleLog Insight Forwarder and working with SCVMM
Hi All, I am new to LI and I have 3 questions. I have 2 sites. Site A a LI 4.3 3-node cluster and Site B has no LI yet. 1. To collect logs from Site B, do I just install a LI forwarder in Site B and...
View Articleduplicate host entry for VCSA
After Migration of vCenter Server (Windows) to VCSA (Appliance), I do see the VCSA twice in Log Insight under hosts. 1. hostname (vcsa)2. fqdn (vcsa.domain.local) any idea why is this? both entries can...
View ArticleActive Directory integration deprecated in Log Insight 4.5+
Hi All, As you might know, Active Directory integration has been deprecated in Log Insight 4.5+ - VMware vRealize Log Insight 4.5 Release Notes. I was wondering if VMware had any plans to add support...
View ArticleLog Insight User login
I have configured an AD Group with appropriate rights and configured AD integration. For most users, the they can login, logout, login, no issues.... However, for one user, he can only login once....
View ArticleLog Insight 4.0 agent for Windows does not stay connected on port 9543
I have been trying to upgrade agents to v4.0 which by default uses cfapi over SSL on port 9543. If I install the agent this way on DMZ agents they do not stay connected to Log Insight. If I start the...
View ArticleRemove text from extracted value in a Field
Hi, Is it possible to remove text from within an extracted value. Probably best to give an example of what I am trying to do:- Cisco ACS logs have the commands which are run on devices. e.g. CmdSet=[...
View ArticleForwarder do not preserve source field
Hi All, I have loginisght 4.3.0-5084751 installed. I have two loginsight forwarders installed in two diffent location, which forward the logs to central cluster of loginsight servers. The issue is the...
View ArticleLog Insight 4.3 error
One of the Windows agent is crashing and won't start and continuously retry and created log file (currently over 200k log files created....) 1. What would be causing the following error? 2017-07-12...
View ArticleBuild query/alert help: No logs received from given hosts/agents
I'm struggling to figure out a way to build this as a query and subsequently as an alert. My previous post is involved in this issue. The problem I'm trying to address here is when a host or hosts stop...
View ArticleLog Insight VSAN Content Pack Not Populating Data
I have installed the VSAN Content Pack and I have yet to see a single update to the fields. Everything else is running fine, but the one content pack I have that requires no actual intervention isn't...
View ArticleAlerts to vROps are not associated with correct object
Versions involved are vRLI 4.5 and vROps 6.6. The vRLI agent is installed on a VM which is being monitored by vROps. Integrations are configured between the two products. One can view the logs of the...
View ArticleSyslog configuration failed during configure log insight
Dear allHi after deploy log insight i inser vcenter login info but now get this error Syslog configuration failed. See http://kb.vmware.com/kb/2003322 for manual configuration. (Details: Client...
View ArticleAbility to export/import alerts in Log Insight
I see there is the ability to export alert definitions to a CSV file, but I don't see where there is the ability to import them. I'm looking to copy and keep a consistent set of alerts across all Log...
View ArticleExtracted Field not working as expected
I have created and extracted field as in the attachment, its to extract the username which was locked out. Its working correctly, as in the dark green section is correct and the lighter green covers...
View ArticleIs it possible to enable Log Insight alerts over a specific period?
Hello All, This is my first post in the community and hope it fits to the community terms of use (I try my best).I would like to know if it possible to enable the log insight alerts over a specific...
View ArticleLog Insight not receiving events from View Composer and View SQL servers in...
Hi all, am looking for some assistance getting Log Insight to monitor a Horizon View 7.1 environment. LI is successfully monitoring all our connection servers but not our Composer and SQL server. LI...
View Article